Microsoft Windows 10 21H2 vulnerabilities
3,745 known vulnerabilities affecting microsoft/windows_10_21h2.
Total CVEs
3,745
CISA KEV
91
actively exploited
Public exploits
55
Exploited in wild
102
Severity breakdown
CRITICAL123HIGH2691MEDIUM922LOW9
Vulnerabilities
Page 116 of 188
CVE-2023-36583P3HIGHCVSS 7.3fixed in 10.0.19041.35702023-10-10
CVE-2023-36583 [HIGH] CWE-416 CVE-2023-36583: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2023-36590P3HIGHCVSS 7.3fixed in 10.0.19041.35702023-10-10
CVE-2023-36590 [HIGH] CVE-2023-36590: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2023-36582P3HIGHCVSS 7.3fixed in 10.0.19041.35702023-10-10
CVE-2023-36582 [HIGH] CWE-190 CVE-2023-36582: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2023-36592P3HIGHCVSS 7.3fixed in 10.0.19041.35702023-10-10
CVE-2023-36592 [HIGH] CWE-94 CVE-2023-36592: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2023-36574P3HIGHCVSS 7.3fixed in 10.0.19041.35702023-10-10
CVE-2023-36574 [HIGH] CWE-94 CVE-2023-36574: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2023-36591P3HIGHCVSS 7.3fixed in 10.0.19041.35702023-10-10
CVE-2023-36591 [HIGH] CWE-94 CVE-2023-36591: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2023-36571P3HIGHCVSS 7.3fixed in 10.0.19041.35702023-10-10
CVE-2023-36571 [HIGH] CWE-94 CVE-2023-36571: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2023-36573P3HIGHCVSS 7.3fixed in 10.0.19041.35702023-10-10
CVE-2023-36573 [HIGH] CWE-94 CVE-2023-36573: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2023-36589P3HIGHCVSS 7.3fixed in 10.0.19041.35702023-10-10
CVE-2023-36589 [HIGH] CWE-94 CVE-2023-36589: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2023-36570P3HIGHCVSS 7.3fixed in 10.0.19041.35702023-10-10
CVE-2023-36570 [HIGH] CWE-94 CVE-2023-36570: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2023-36575P3HIGHCVSS 7.3fixed in 10.0.19041.35702023-10-10
CVE-2023-36575 [HIGH] CWE-94 CVE-2023-36575: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2023-36572P3HIGHCVSS 7.3fixed in 10.0.19041.35702023-10-10
CVE-2023-36572 [HIGH] CWE-94 CVE-2023-36572: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2024-43615P3HIGHCVSS 7.1fixed in 10.0.19044.50112024-10-08
CVE-2024-43615 [HIGH] CWE-73 CVE-2024-43615: Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
nvd
CVE-2025-49680P3HIGHCVSS 7.3fixed in 10.0.19044.60932025-07-08
CVE-2025-49680 [HIGH] CWE-59 CVE-2025-49680: Improper link resolution before file access ('link following') in Windows Performance Recorder allow
Improper link resolution before file access ('link following') in Windows Performance Recorder allows an authorized attacker to deny service locally.
nvd
CVE-2026-32093P3HIGHCVSS 7.0fixed in 10.0.19044.71842026-04-14
CVE-2026-32093 [HIGH] CWE-122 CVE-2026-32093: Concurrent execution using shared resource with improper synchronization ('race condition') in Funct
Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2023-36394P3HIGHCVSS 7.0fixed in 10.0.19041.36932023-11-14
CVE-2023-36394 [HIGH] CWE-59 CVE-2023-36394: Windows Search Service Elevation of Privilege Vulnerability
Windows Search Service Elevation of Privilege Vulnerability
nvd
CVE-2026-24285P3HIGHCVSS 7.0fixed in 10.0.19044.70582026-03-10
CVE-2026-24285 [HIGH] CWE-416 CVE-2026-24285: Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-21242P3HIGHCVSS 7.0fixed in 10.0.19044.69372026-02-10
CVE-2026-21242 [HIGH] CWE-416 CVE-2026-21242: Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges lo
Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70249P3HIGHCVSS 7.0fixed in 10.0.19044.78072026-10-13
CVE-2026-70249 [HIGH] CWE-416 CVE-2026-70249: Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70271P3HIGHCVSS 7.0fixed in 10.0.19044.78072026-10-13
CVE-2026-70271 [HIGH] CWE-416 CVE-2026-70271: Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
nvd